Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lz11PFdqeHQqTyieVTwfYTCWMOk.roa
File: Lz11PFdqeHQqTyieVTwfYTCWMOk.roa (raw, json)
Hash identifier: uIf49y0M9Po9TwR9qcF0BY4WjQCA60MM5v9E+JXTqD0=
Subject key identifier: 2F:3D:75:3C:57:6A:78:74:2A:4F:28:9E:55:3C:1F:61:30:96:30:E9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lz11PFdqeHQqTyieVTwfYTCWMOk.roa
Signing time: Thu 15 Sep 2022 02:46:15 +0000
ROA not before: Thu 15 Sep 2022 02:46:15 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.195.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:15 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2F3D753C576A78742A4F289E553C1F61309630E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:28:bd:e4:03:78:49:ed:82:d4:16:f5:73:89:
b7:68:ff:7d:f7:f2:a3:c6:3b:90:e1:ab:73:6f:dd:
fd:e7:cc:2b:b1:9e:82:0a:d9:a9:19:65:ce:25:39:
88:d9:12:23:eb:36:64:80:d4:c4:94:3b:ad:ef:d7:
7c:9d:f2:43:f4:ed:35:a4:f4:c1:a7:34:6e:82:67:
83:eb:a9:93:f3:85:a7:a4:97:8b:d8:57:99:92:fd:
34:b6:0f:ab:c0:83:85:38:78:e1:cb:7e:26:b7:04:
c1:9a:58:de:dd:ce:cc:e2:f7:69:6e:70:56:8e:f2:
d6:03:2a:70:7f:e8:6a:d5:5c:b3:b8:8f:15:e2:bc:
83:99:51:b9:b6:a9:d9:84:c6:d1:ff:87:9a:96:8c:
9d:4d:8e:a5:3c:2f:a2:ee:14:77:bf:15:a5:27:ad:
bf:5f:4a:51:96:28:87:5f:88:c5:e0:24:1c:64:6b:
1c:91:55:97:f5:24:09:bb:83:0f:45:09:8c:a7:5b:
0e:e1:88:d5:52:ea:65:83:f8:b8:fa:32:b2:e2:43:
97:12:29:39:71:46:00:ac:b6:dd:a4:35:d3:a6:e4:
85:7a:da:ce:91:34:a5:05:54:be:c0:19:96:fa:c6:
8b:c8:33:64:58:65:32:a6:12:07:b3:ed:26:4a:6a:
0a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3D:75:3C:57:6A:78:74:2A:4F:28:9E:55:3C:1F:61:30:96:30:E9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lz11PFdqeHQqTyieVTwfYTCWMOk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.246.0/24
Signature Algorithm: sha256WithRSAEncryption
86:d8:bc:9a:fc:50:06:a2:21:7a:82:6c:26:e7:5f:ec:bd:40:
1b:01:36:4f:fd:28:5c:ea:77:39:d6:aa:f6:64:d9:56:07:e2:
5a:a5:79:6e:5b:09:e0:5c:17:f7:33:f6:b7:d5:11:89:da:8b:
ea:66:6e:32:9a:f9:4f:1c:9e:48:cb:b4:0b:43:54:5a:ff:32:
06:f0:d6:37:40:a3:fc:aa:e7:90:92:2e:90:fc:c6:c5:f4:9a:
b8:a9:79:27:ba:1a:60:fd:da:96:ba:98:47:a1:34:ef:a7:c7:
11:59:2f:60:28:5f:46:2c:3b:60:3a:f9:16:a0:cb:d5:23:d5:
8a:d4:5e:76:25:c8:61:da:66:09:c0:f2:7b:9c:47:30:b6:fb:
a1:b1:c6:96:73:11:f6:a3:f7:d4:4d:ff:43:a8:cd:fb:16:36:
5c:3d:1e:a2:bf:77:ae:7c:3b:8d:2a:5a:36:ff:be:b7:ae:7d:
ef:eb:29:40:a8:79:ea:d1:40:da:26:68:2e:8d:47:b1:4f:00:
bf:e0:17:89:76:ac:0a:6a:23:76:3f:e2:02:32:0d:f6:45:f0:
f6:8e:94:ed:af:d4:65:c9:62:72:94:a7:92:31:c5:dc:c1:e2:
25:4d:5a:ec:82:7a:5d:67:fe:af:08:ab:d2:d1:cb:5d:0c:cf:
d4:3b:8a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org